This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft File: mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json) Hash identifier: KpHjCCsn14+Ejoo2NuNlh4xaVu79/HMwAMGM4gnCFks= Subject key identifier: A6:B8:67:C7:9D:8B:AB:91:C7:79:1D:87:F2:66:3F:E7:5A:D6:80:8C Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6 Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6 Certificate serial: 019B3B6B684EBBBF501413F9D8F94C3D0E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft Manifest number: 1476 Signing time: Sat 20 Dec 2025 11:00:53 +0000 Manifest this update: Sat 20 Dec 2025 11:00:53 +0000 Manifest next update: Sun 21 Dec 2025 11:00:53 +0000 Files and hashes: 1: 8d3irncdHLZkdRnMP5XTaUSwUDg.roa (hash: rzsl5FRJP8PNH7SlWyQWAee7OQ1otGN4ArKngJgMF9U=) 2: Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa (hash: S5Af46ICAzl/XprWaWxfdUsVmQ9qZwM6fg2ZXROy37M=) 3: c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa (hash: nRoWd4CNF6uxWBOBAy58vxnhfOJmaxOekRUGTIQqLKA=) 4: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: 53qKIZLhcjpfS1wocDhHqpxTwmwI1nZx/v/NrEy4QI8=) 5: yODnLhtEhpSHZKcWtftsr2wrfHM.roa (hash: vGS7Y/f4ssyV0t0WiPGg8Dqt5gZnLrzS3R4VljxDfWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:68:4e:bb:bf:50:14:13:f9:d8:f9:4c:3d:0e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6 Validity Not Before: Dec 20 11:00:53 2025 GMT Not After : Dec 21 11:00:53 2025 GMT Subject: CN=a6b867c79d8bab91c7791d87f2663fe75ad6808c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:e4:1a:8a:6f:53:be:f0:aa:07:b1:c3:82: 7e:c9:f2:a3:d2:ee:52:53:ff:8d:85:69:4f:75:ad: 54:a8:bd:66:6d:0b:58:ba:02:62:c1:2a:60:57:19: 5e:d7:31:14:1d:d7:5f:2e:88:d0:a0:8f:8d:28:07: cd:fb:99:fa:6b:a3:c8:6c:85:6f:4e:f5:37:32:22: 79:02:fd:3d:54:f9:80:a3:4e:9a:35:17:19:46:db: 2e:2c:aa:5e:78:06:11:30:e0:da:f6:11:20:b0:f9: ae:4d:ef:6b:17:d5:ed:42:ac:4e:f1:df:20:59:3c: da:63:ac:18:db:2a:9d:fe:a8:4b:41:e7:b8:45:9c: a9:06:a4:97:ad:e6:e1:3a:48:23:26:14:81:3f:09: 65:77:62:00:2b:e2:61:ff:a4:46:2f:79:42:c4:c8: 2e:2c:ba:e0:2f:d8:1b:5c:f9:5d:46:37:dc:d7:be: 62:16:f6:98:8d:9f:da:f9:8d:67:b9:3b:72:3e:db: 26:b4:a1:f5:cc:58:a3:ae:d0:4e:b1:5c:ae:c1:9e: 8e:eb:d2:e5:7f:79:fc:00:19:42:f9:d7:14:11:e4: 76:42:63:80:8a:81:fa:03:cc:63:6b:b9:d2:72:27: 22:4b:43:dd:82:7d:b5:8e:3c:8d:f6:be:9f:5e:4c: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B8:67:C7:9D:8B:AB:91:C7:79:1D:87:F2:66:3F:E7:5A:D6:80:8C X509v3 Authority Key Identifier: keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1a:8d:d6:8e:58:19:b8:4e:eb:19:f6:c4:0e:7b:32:1e:10: f9:46:59:ae:ef:38:39:a6:2a:a9:11:cf:37:d1:99:fd:2e:9a: c4:c3:2d:88:ac:07:9e:bb:e8:c4:dd:1f:79:01:f3:d9:67:91: 76:82:55:32:bf:22:53:a3:3b:35:01:9e:a8:1e:aa:d5:c5:39: 24:20:1b:4c:6e:cf:30:dc:36:ce:57:32:ae:18:1e:03:1a:8b: 3e:f1:0f:ae:27:38:4d:55:75:e2:14:39:c5:b6:d7:04:d4:0f: 56:0c:d6:81:ae:3e:03:06:14:47:87:90:2c:07:4a:c0:c6:7a: 1f:57:90:0b:4c:58:3e:fc:d0:1e:de:e1:b2:9a:2b:c7:c1:5a: 81:65:fe:47:9a:bb:09:d6:9a:16:6d:dd:bf:1e:c3:91:d0:f4: 68:68:e4:3e:87:24:bb:86:8f:b3:bf:8d:71:f6:0e:a0:d9:1e: 48:c5:34:b1:f0:88:da:70:1b:48:0b:19:0f:50:1c:4c:33:38: de:39:64:ab:c3:b8:e0:0b:6a:d3:62:9f:fb:ef:52:02:47:ee: b7:20:41:45:25:d2:2c:55:9c:d2:ab:be:ed:2f:0b:89:60:eb: 82:41:d8:72:b9:01:b5:e1:a9:81:11:f8:cd:68:e5:41:4a:a2: 40:4d:c4:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a2hOu79QFBP52PlMPQ4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTdmNzc3ZTcxYWMzNDEyMmVkYjM1ZWRkNjBjZjE0ZDc1 YjllZjYwHhcNMjUxMjIwMTEwMDUzWhcNMjUxMjIxMTEwMDUzWjAzMTEwLwYDVQQD EyhhNmI4NjdjNzlkOGJhYjkxYzc3OTFkODdmMjY2M2ZlNzVhZDY4MDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApevkGopvU77wqgexw4J+yfKj0u5S U/+NhWlPda1UqL1mbQtYugJiwSpgVxle1zEUHddfLojQoI+NKAfN+5n6a6PIbIVv TvU3MiJ5Av09VPmAo06aNRcZRtsuLKpeeAYRMODa9hEgsPmuTe9rF9XtQqxO8d8g WTzaY6wY2yqd/qhLQee4RZypBqSXrebhOkgjJhSBPwlld2IAK+Jh/6RGL3lCxMgu LLrgL9gbXPldRjfc175iFvaYjZ/a+Y1nuTtyPtsmtKH1zFijrtBOsVyuwZ6O69Ll f3n8ABlC+dcUEeR2QmOAioH6A8xja7nSciciS0Pdgn21jjyN9r6fXkxP/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa4Z8edi6uRx3kdh/JmP+da1oCMMB8GA1UdIwQY MBaAFJkX93fnGsNBIu2zXt1gzxTXW572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJmM2QtY2F3MEVpN2JOZTNXRFBGTmRibnZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iZThkNTktNzcwNC00NWY4LWIzOTkt YTg4ZjU3NDE1MmI2LzEvbVJmM2QtY2F3MEVpN2JOZTNXRFBGTmRibnZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9iZThkNTktNzcwNC00NWY4LWIzOTktYTg4ZjU3NDE1MmI2 LzEvbVJmM2QtY2F3MEVpN2JOZTNXRFBGTmRibnZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBqN1o5Y GbhO6xn2xA57Mh4Q+UZZru84OaYqqRHPN9GZ/S6axMMtiKwHnrvoxN0feQHz2WeR doJVMr8iU6M7NQGeqB6q1cU5JCAbTG7PMNw2zlcyrhgeAxqLPvEPric4TVV14hQ5 xbbXBNQPVgzWga4+AwYUR4eQLAdKwMZ6H1eQC0xYPvzQHt7hsporx8FagWX+R5q7 CdaaFm3dvx7DkdD0aGjkPocku4aPs7+NcfYOoNkeSMU0sfCI2nAbSAsZD1AcTDM4 3jlkq8O44Atq02Kf++9SAkfutyBBRSXSLFWc0qu+7S8LiWDrgkHYcrkBteGpgRH4 zWjlQUqiQE3ElQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:08:18 2025 by rpki-client